$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/65c1483a-c4e2-356c-b9e1-ec496cd15b8c.roa File: 65c1483a-c4e2-356c-b9e1-ec496cd15b8c.roa (raw, json) Hash identifier: rhNljs3x+tQ/HETBAViuaaKGd2BvzuTmHB6xEI07da8= Subject key identifier: 57:A3:26:B3:7B:16:50:EA:C6:DF:62:17:40:BC:A9:6F:05:6C:76:44 Certificate issuer: /CN=18800324-5150-4981-a144-bdb80e6bcb7c Certificate serial: 010D0C9F4328584F57682E3DC3A48E0F69895FC0 Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/65c1483a-c4e2-356c-b9e1-ec496cd15b8c.roa Signing time: Wed 30 Sep 2026 01:00:12 +0000 ROA not before: Wed 30 Sep 2026 01:00:12 +0000 ROA not after: Tue 29 Dec 2026 02:00:12 +0000 asID: 44559 IP address blocks: 172.120.207.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 Oct 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:57:68:2e:3d:c3:a4:8e:0f:69:89:5f:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c Validity Not Before: Sep 30 01:00:12 2026 GMT Not After : Dec 29 02:00:12 2026 GMT Subject: CN=ad78477e-d50f-45e3-9fdc-d0a1e116640b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:cf:38:db:47:d5:ff:02:90:94:85:22:b5:69: 75:cf:f9:4e:7c:f0:6c:fb:d9:5c:9f:9b:57:26:f3: 56:12:f1:63:01:15:f4:b0:cf:87:12:69:f4:cf:64: 89:0f:91:22:15:02:a6:22:e8:06:4e:08:2f:6b:bd: 63:b2:a8:b7:37:de:b4:12:f3:4c:11:dd:f0:5f:c6: 71:f3:c3:2b:ab:f6:3b:6b:bf:16:94:8b:aa:af:43: ff:35:8e:54:ce:7d:0a:36:a7:1f:cd:78:6a:29:0c: 47:fe:9a:b0:b6:7b:7b:02:82:69:15:18:64:e8:db: 9c:39:26:8c:14:3e:57:68:f4:6d:16:13:b7:80:54: bc:5e:88:d3:69:68:fd:d7:82:98:3a:65:05:16:45: 14:36:0d:d5:bc:73:3c:3e:5f:2b:38:7e:50:14:c0: bf:98:12:e8:25:88:6b:a1:f4:af:2c:35:cd:4e:46: 99:7b:32:bd:3c:c0:d9:e6:75:44:00:91:a9:b2:af: 15:93:70:36:c5:ca:04:fa:7d:b1:65:f6:1a:42:c1: b2:f6:28:be:b1:1f:75:25:64:9c:8d:53:e8:96:d6: be:7c:62:e1:3c:69:d6:a8:0b:63:0a:0f:75:51:fc: 6a:13:8a:a6:c3:d9:d5:b5:d2:6a:a7:93:ee:b5:69: 50:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 57:A3:26:B3:7B:16:50:EA:C6:DF:62:17:40:BC:A9:6F:05:6C:76:44 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/65c1483a-c4e2-356c-b9e1-ec496cd15b8c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl X509v3 Authority Key Identifier: keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer sbgp-ipAddrBlock: critical IPv4: 172.120.207.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 82:db:f8:cd:f6:99:65:00:ee:c3:94:39:d3:95:8a:1f:3a:81: a2:ea:c3:10:11:7a:26:b4:40:a0:c3:97:af:26:65:a3:df:11: a0:01:5f:a6:25:14:a8:f8:76:95:b4:b3:5f:52:81:c5:1f:c3: af:93:cd:e8:d6:2e:75:66:88:5d:f9:2e:93:39:55:f3:f0:89: 2b:4a:5b:fe:ea:f1:2d:49:3d:c5:01:f6:03:d3:c6:cc:68:b2: ba:28:c6:82:47:dd:0d:8c:c4:61:95:14:c6:4c:39:34:1c:0f: 3d:25:bc:6d:da:05:50:f9:6d:07:c2:92:8a:da:ec:21:74:ef: 28:a1:92:5a:02:de:61:a7:a5:4a:e9:ad:dc:b0:d1:45:89:3e: b9:f4:45:d8:6e:2d:24:17:f6:0d:3a:08:49:c1:ab:40:53:06: fe:eb:d4:8c:ae:a9:d1:a9:65:6a:10:0f:9d:25:e9:b5:f5:46: e0:b3:13:3e:a0:07:ef:50:b8:91:c6:f4:28:90:60:66:26:70: 14:e8:d6:df:38:ca:79:4b:12:12:95:98:ad:90:7a:0a:8f:76: d4:22:8b:93:d1:b9:9d:e6:80:46:22:37:3f:e1:22:70:bc:7d: e9:50:49:f2:f7:b7:db:51:27:5f:a5:7a:ca:0f:91:b3:38:27: 11:1f:ab:9d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9XaC49w6SOD2mJX8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMTg4MDAzMjQtNTE1MC00OTgxLWExNDQtYmRiODBlNmJj YjdjMB4XDTI2MDkzMDAxMDAxMloXDTI2MTIyOTAyMDAxMlowLzEtMCsGA1UEAxMk YWQ3ODQ3N2UtZDUwZi00NWUzLTlmZGMtZDBhMWUxMTY2NDBiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyM8420fV/wKQlIUitWl1z/lOfPBs+9lcn5tX JvNWEvFjARX0sM+HEmn0z2SJD5EiFQKmIugGTggva71jsqi3N960EvNMEd3wX8Zx 88Mrq/Y7a78WlIuqr0P/NY5Uzn0KNqcfzXhqKQxH/pqwtnt7AoJpFRhk6NucOSaM FD5XaPRtFhO3gFS8XojTaWj914KYOmUFFkUUNg3VvHM8Pl8rOH5QFMC/mBLoJYhr ofSvLDXNTkaZezK9PMDZ5nVEAJGpsq8Vk3A2xcoE+n2xZfYaQsGy9ii+sR91JWSc jVPolta+fGLhPGnWqAtjCg91UfxqE4qmw9nVtdJqp5PutWlQfQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFejJrN7FlDqxt9iF0C8qW8FbHZEMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8xODgw MDMyNC01MTUwLTQ5ODEtYTE0NC1iZGI4MGU2YmNiN2MvNjVjMTQ4M2EtYzRlMi0z NTZjLWI5ZTEtZWM0OTZjZDE1YjhjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMTg4MDAzMjQtNTE1MC00OTgxLWEx NDQtYmRiODBlNmJjYjdjLzE4ODAwMzI0LTUxNTAtNDk4MS1hMTQ0LWJkYjgwZTZi Y2I3Yy5jcmwwHwYDVR0jBBgwFoAUEWtHMzbZ6J21lhte76NAIq7eabYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8xODgwMDMyNC01MTUwLTQ5ODEtYTE0NC1iZGI4 MGU2YmNiN2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArHjPMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAILb+M32mWUA7sOUOdOVih86gaLqwxAReia0QKDDl68mZaPfEaABX6Yl FKj4dpW0s19SgcUfw6+TzejWLnVmiF35LpM5VfPwiStKW/7q8S1JPcUB9gPTxsxo srooxoJH3Q2MxGGVFMZMOTQcDz0lvG3aBVD5bQfCkora7CF07yihkloC3mGnpUrp rdyw0UWJPrn0RdhuLSQX9g06CEnBq0BTBv7r1IyuqdGpZWoQD50l6bX1RuCzEz6g B+9QuJHG9CiQYGYmcBTo1t84ynlLEhKVmK2QegqPdtQii5PRuZ3mgEYiNz/hInC8 felQSfL3t9tRJ1+lesoPkbM4JxEfq50= -----END CERTIFICATE-----Generated at Sun Oct 11 13:50:23 2026 by rpki-client